# List allowed websites

**GET** `/api/embed/v1/websites`

Lists the websites that may show any customer’s embed.

Needs a partner key: `Authorization: Bearer gre_…`, from [Platform › Partner keys](https://docs.gorunner.io/embed/platform-screens#partner-keys). Call it from your server only.

Embed · Self-hosted with an Embed license

## Request

It takes no parameters.

## The same list as the console

It is **Platform › Partner keys › Allowed websites**. The console asks for a two-factor code to change it; your key doesn’t.

## Responses

- 200 OK

  The list, up to 200.

- 500 `INTERNAL_ERROR`

  Something failed on the installation’s side. Try again.

Any call can also answer: [`401 UNAUTHORIZED`](https://docs.gorunner.io/errors#UNAUTHORIZED) · [`403 EMBED_NOT_LICENSED`](https://docs.gorunner.io/errors#EMBED_NOT_LICENSED) · [`403 IP_NOT_ALLOWED`](https://docs.gorunner.io/errors#IP_NOT_ALLOWED) · [`429 RATE_LIMITED`](https://docs.gorunner.io/errors#RATE_LIMITED) · [`503 BUSY`](https://docs.gorunner.io/errors#BUSY). See [Errors](https://docs.gorunner.io/embed/api#errors).

Request

**curl**

```bash
GORUNNER="https://automations.example.com"
GORUNNER_EMBED_KEY="YOUR_PARTNER_KEY"  # gre_…

curl "$GORUNNER/api/embed/v1/websites" \
  -H "Authorization: Bearer $GORUNNER_EMBED_KEY"
```

**JavaScript**

```js
const GORUNNER = "https://automations.example.com";
const KEY = process.env.GORUNNER_EMBED_KEY; // gre_…

const res = await fetch(
  `${GORUNNER}/api/embed/v1/websites`,
  {
    headers: { Authorization: `Bearer ${KEY}` },
  },
);
const { data } = await res.json();
```

**Python**

```python
import os, requests

GORUNNER = "https://automations.example.com"
KEY = os.environ["GORUNNER_EMBED_KEY"]  # gre_…

res = requests.get(
    f"{GORUNNER}/api/embed/v1/websites",
    headers={"Authorization": f"Bearer {KEY}"},
)
data = res.json()["data"]
```

Response · 200 OK

```json
{
  "data": {
    "websites": [
      {
        "origin": "https://app.bakery.example"
      },
      {
        "origin": "https://*.northwind.example"
      }
    ],
    "max": 200
  }
}
```

**Every field**

It takes no body.

### Response · 200 OK

- `data` · object
  - `websites` · array of objects
    - `origin` · string
  - `max` · integer

Related: [Allow a website](https://docs.gorunner.io/embed/api/websites/add-website) · [Set up Embed](https://docs.gorunner.io/embed/set-up)

Source: https://docs.gorunner.io/embed/api/websites/list-websites